siderolabs / omni

SaaS-simple deployment of Kubernetes - on your own hardware.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[feature] Allow disabling of authentication options

myoung34 opened this issue · comments

Problem Description

As a hobbyist I'd like more flexibility on authentication/authorization options

Seems as though a few saml providers are not just supported, but required (auth0, okta, etc)
While these are free, they require you to listen on 443 (They require a secure origin)

This is very inflexible for set ups where auth is handled else where such as:

  • dex + traefik-forward-auth
  • local auth (dex, traefik local auth middleware, etc)
  • tailscale with no configured auth (can be dangerous but thats not an assumption that the software should make)
  • oauth2-proxy
  • countless other options

More barriers to entry come to mind such as:

  • not wishing to handle tls cert/key locally to this app
  • having to serve public-facing (vs behind tailscale or cloudflare tunnels, etc)

Solution

Allow configuration to be able to disable auth completely so that other sources listed above can be tied in

Alternative Solutions

No response

Notes

No response